EUVD-2025-199441

Malicious code in @posthog/postgres-plugin npm...

MAL-2025-191297 Malicious code in @posthog/netdata-event-processing (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 3f3fdd5fe90ae01310b329b8e4892a4e79799685cdb45682fd4de592b402710e The package @posthog/netdata-event-processing was found to contain malicious code. Source: google-open-source-security...

Malicious code in @medusajs/analytics-posthog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4bcda5a08e7631f3c8bdbfd1c6a827a23b4a2cadf1ca3ca3a1ae32674df5172 The package @medusajs/analytics-posthog was found to contain malicious code. Source: ghsa-malware...

MAL-2025-191456 Malicious code in @medusajs/analytics-posthog (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector a4bcda5a08e7631f3c8bdbfd1c6a827a23b4a2cadf1ca3ca3a1ae32674df5172 The package @medusajs/analytics-posthog was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-199299

Malicious code in @posthog/rrweb-replay npm...

MAL-2025-191299 Malicious code in @posthog/rrweb-replay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 084c272e547764a91347a8436855b707a75409f57fde2692078e9edf5d9b703b The package @posthog/rrweb-replay was found to contain malicious code. Source: ghsa-malware...

Malicious code in @posthog/rrweb-replay (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 084c272e547764a91347a8436855b707a75409f57fde2692078e9edf5d9b703b The package @posthog/rrweb-replay was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-199096

Malicious code in @posthog/plugin-server npm...

MAL-2025-190947 Malicious code in @posthog/plugin-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbacde545c940abfe63a0667580ea37cfc021d6b3e25094b71e23273cd899e1b The package @posthog/plugin-server was found to contain malicious code. Source: ghsa-malware...

Malicious code in @posthog/plugin-server (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector cbacde545c940abfe63a0667580ea37cfc021d6b3e25094b71e23273cd899e1b The package @posthog/plugin-server was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-199097

Malicious code in @posthog/drop-events-on-property-plugin npm...

Malicious code in @posthog/drop-events-on-property-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector d1dee879dbf8f8819008c31e641e4fec6584690087c6929cba530e9171464cb4 The package @posthog/drop-events-on-property-plugin was found to contain malicious code. Source: ghsa-malware...

MAL-2025-190945 Malicious code in @posthog/clickhouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab67710c7cf24d338618be2ab087d4c3b27117879492e29334b31cd0328e171a The package @posthog/clickhouse was found to contain malicious code. Source: ghsa-malware...

EUVD-2025-199098

Malicious code in @posthog/clickhouse npm...

Malicious code in @posthog/clickhouse (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector ab67710c7cf24d338618be2ab087d4c3b27117879492e29334b31cd0328e171a The package @posthog/clickhouse was found to contain malicious code. Source: ghsa-malware...

Embedded Malicious Code

Overview Affected versions of this package are vulnerable to Embedded Malicious Code. This package contains malicious code associated with the Sha1-hulud supply chain attack, and its content was removed from the official package manager. The malware functions as a self-replicating worm capable of...

Malicious code in @posthog/pagerduty-plugin (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 34f138dd2e1bf5607f92e6db9b88a64a178880202726e7dccf9d2970644cf007 The package @posthog/pagerduty-plugin was found to contain malicious code. Source: google-open-source-security...

EUVD-2025-198927

Malicious code in @posthog/variance-plugin npm...

EUVD-2025-198940

Malicious code in @posthog/maxmind-plugin npm...

Malicious code in @posthog/nextjs-config (npm)

--- -= Per source details. Do not edit below this line.=- Source: amazon-inspector 413c527b7ca5fcc3cc28ad0195f527e99f9d0f1061994161eafba170450175b7 The package @posthog/nextjs-config was found to contain malicious code. Source: google-open-source-security...